The Security, Governance & Risk Management Blog

Most organisations follow a sample based approach to identifying risk or gaining assurance for reasons of cost and practicality. Risk Assessments are already widely used and accepted as a method for risk identification and assurance and can be an extremely powerful and cost effective tool when done right and an utterly useless tool if done wrong. Consider the global practice of filing tax returns as a highly effective way of getting billions of people to declare their income and deductibles through a self assessment process. The previous Safe Harbor scheme, on the other hand, is an example of applying self assessments without any controls or meaningful oversight and using self assessments very poorly.

Are you spending too much time on vendor governance without meaningful results to show for it? Are you stuck figuring out if you are asking the right questions in your self assessments? Watch how you can easily setup an assessment of 50 vendors in real time on Alyne in just three minutes.

It’s been an intensive couple of months filled with lots of hard work, tough discussions, a ridiculous number of Slack messages around the clock and a substantial amount of drinks trying to reach the Ballmer Peak. With the publishing of this article, Alyne is now officially live and ready for business. The developed platform represents not only our current product, but also a foundation for a pipeline full of exciting features and functionality planned for the next months and years.

Digitalization is a seemingly new buzz word on the agenda in many organizations as well as in pitch decks of savvy consultants. It describes the introduction of digital technology to an organizational process to make existing activities more effective or deliver a new service to the organization. Avoiding manual steps, human intervention and any unnecessary interfaces are commonly a focus point. Over the past decades, the term has been used in various contexts, from actually transforming physical processes like type setting to digital printing or using computer aided design instead of pencil and paper. However, in today’s practice, businesses usually mean leveraging X-as-a-Service offerings to apply flexible and scalable technology to optimize a specific business outcome when talking about digitalization.

This text was submitted as an answer to the UK Financial Conduct Authority’s Call for Input on Regtech. We’re publishing it also here on our blog to foster wider discussion.

Based on our extensive experience in this field, we have been discussing several RegTech-related ideas here at Alyne (further thinking on this in our blog).

In the tradition of other “-Techs” (such as “FinTech”), we understand RegTech as digitisation of regulatory compliance processes. Digitisation is of course a buzzword itself, but it helps to frame it more in the context of automation. In other industries and topic areas, it is envisioned to completely substitute manual processes at some point or at least augment human capabilities and capacity to rapidly scale and leverage the output of manual processes.